MAL-2025-150954 Malicious code in @miptaa02/stupid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907c8c425aee0e4000f13c6d10b66f0f5b7d20f963278774ef94765e182fff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155638 Malicious code in hafiz-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa2b4c012e616ef6fda720aa266b963340bcc9120e65dfdac75ca6583f2184d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156821 Malicious code in iqbal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07dc6c3d079ae3846a29bcd72bd2db7d89bd86492b797e2dc843afe90f15d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167801 Malicious code in teagood-sukuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d35076ac7bcad8a0e3f651ddf2fea4c234aa70577c3c4fffd071bd241b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156707 Malicious code in inufgi-gotumafa-anfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67d0c604ce2c7beaf53d1d9b333e74014d3fbf21da013058653d7d43ce8b25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161959 Malicious code in nasrul-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17d77c81e1fa3ab20b1e1c4aafb822e0c097b5634a3aeea0ecc4c632278a9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159286 Malicious code in man-nonatai-gag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8c90ce0aec5046e76a53af23f6655aa528198a375b498c61dd10f82612b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162166 Malicious code in nokire-abimanyu51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d5b217fb5b37c3a804577bcb1bb221dd0cca5031820007b186bb1f8fe6e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152124 Malicious code in aji-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdec47942174cf618e9d97263be9af576d44a92c96a39fd0e21c7cfcc2dd184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154687 Malicious code in dioago-kamoi-alaliaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1743a73800e532e5cb4c1cc067ed4e3954a75c4060b30daf7c692a0117b46145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea4b40d82048e522b35c108635a7cff58f3cf1ec1f13295ea65aabb27ac87c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-qeuspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4de345c152848432cb53cc609bee2ea348d348749219204c3d1246c1d4d7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2d30a27f69099744d4fcdcaf1e82416134574faa51c4a41426b1e5beaf16ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-nutrui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd314bf5337c96a95c8023cf132e395957e6a691e8cdaf87a810d6dc9921378e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tifjfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507963ab6ec770480c0aaff477f59c6f3b39ec7c0fe33f3e8ac2d7b82357799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaig-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa39fdc4443998decf2b175d104a20f04fd9c30389141200d9feb4f540f99cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araonbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e175a7d597475d4c55242384ea674cb2f6fab362a5ac34d193b5c4ace5e7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...